Jonatan Männchen / EEF

Path traversal in imported file_entries name allows arbitrary file write via URL-type entry download

Session fixation in the CLI login flow allows an unauthenticated attacker to obtain a user's API token

Unbounded decoded HTTP/2 header-list size in cowlib cow_http2_machine enables HPACK amplification memory exhaustion

Cowboy HTTP/1.1 Unbounded Buffering of Pipelined Data During Request Handling Enables Memory Exhaustion

Unbounded request body accumulation on streaming RPCs causes memory exhaustion in grpc_server

Missing authorization in device and deployment group page events allows view-role members to change devices and deployment groups

Improper session invalidation keeps removed or demoted members' open pages and device consoles working at their old role

Mass assignment of organization, product and deployment group IDs allows users to write into other organizations and receive their firmware

Improper authentication lets Google sign-in and confirmation links sign users in to accounts registered with their email address by someone else

Incorrect authorization in the devices page bulk move allows view-role members to move devices into another organization and receive its firmware